The unofficial HackerOne disclosure Timeline

b'Nextcloud' disclosed a bug submitted by b'kichernde_erbse'
b'Exception logging in Sharepoint app reveals clear-text connection details'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'bagder'
b'CVE-2022-42915: HTTP proxy double-free'

26 Nov 2022 timeline

b'curl' disclosed a bug submitted by b'robbotic'
b'CVE-2022-32221: POST following PUT confusion'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikaelgundersen'
b'Profile of disabled user stays accessible'

26 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'michag86'
b'Database resource exhaustion for logged-in users via sharee recommendations with circles'

26 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'SSRF mitigation bypass using DNS Rebind attack'

25 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'open redirect to a remote website which can phish users'

25 Nov 2022 timeline

b'Concrete CMS' disclosed a bug submitted by b'adrian_t'
b'SSRF - pivoting in the private LAN'

25 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikeisastar'
b'XSS in Desktop Client in call notification popup'

25 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikeisastar'
b'XSS in Desktop Client via user status and information'

25 Nov 2022 timeline

b'Nextcloud' disclosed a bug submitted by b'mikeisastar'
b'XSS in Desktop Client in the notifications'

25 Nov 2022 timeline

b'Ruby' disclosed a bug submitted by b'htokumaru'
b'CGI::Cookie'

24 Nov 2022 timeline

b'Ruby' disclosed a bug submitted by b'htokumaru'
b'RubyCGIHTTPHTTP'

24 Nov 2022 timeline

b'Mattermost' disclosed a bug submitted by b'vultza'
b'DoS via Playbook '

23 Nov 2022 timeline

b'Mattermost' disclosed a bug submitted by b'vultza'
b'DoS via Automatic Response Message'

23 Nov 2022 timeline

b'AMBER AI' disclosed a bug submitted by b'khizer47'
b'Support Portal Takeover via Leaked API KEY'

22 Nov 2022 timeline

b'AMBER AI' disclosed a bug submitted by b'mrdot404'
b'Open redirect that can lead to malicious websites'

21 Nov 2022 timeline

b'GitLab' disclosed a bug submitted by b'usd-responsible-disclosure'
b'Dependecy Confusion via Lookup Request Forwarding to PyPi.org'

21 Nov 2022 timeline

b'Weblate' disclosed a bug submitted by b'tanvir_0x'
b'No rate limiting for Remove Account lead to huge Mass mailings'

20 Nov 2022 timeline

b'MTN Group' disclosed a bug submitted by b'roland_hack'
b'Reflected XSS in chatbot'

19 Nov 2022 timeline

1 ... 139 140 141 142 143 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.